Alien Phone Service

I buy the Pixel cash at a shop, flash GrapheneOS, configure your digital bunker — and ship it to you. Four tiers, one goal: privacy from the very first boot.

Digital Bunker — What Gets Configured

Everything that can be set up without your credentials — privacy settings and carefully selected apps that work right out of the box.

Alien Phone Pro — Termux Scripts

In addition to everything from Alien Phone: Termux with four pre-installed Bash and Python scripts, pre-configured aliases, and a compact Termux guide — everything ready to use from the first boot.

• Termux (Linux Terminal for Android) Pre-installed and ready to use. Foundation for all scripts.
• encrypt-folder.sh AES-256 via GPG, SHA512 with 65M iterations — no plaintext temp file. Encrypt folders on demand.
• decrypt-folder.sh SHA256 verification before decryption. Detects .gpg/.pgp automatically.
• exif-cleaner.py Strips all EXIF metadata from photos (GPS, device, timestamp). Saves cleaned copies to a subfolder.
• unzip_downloads.sh Unpacks each ZIP into its own subfolder — no chaos in Downloads.
• Bash aliases pre-configured Short commands for all four scripts — e.g. enc, dec, exif, unz — plus standard shell aliases (ll, la, ..). Ready to use without typing full script names.
• Termux Guide (Cheat Sheet) Compact Markdown file on the device: all commands, all aliases, all script parameters at a glance. Lives in the Termux home directory — always within reach.

FAQ — Terms Explained

What is the Privacy & Permission Control widget?

In the Quick Settings panel (pull down from the top), modern GrapheneOS versions include the "Privacy and Permission Control" widget. It shows your current privacy status at a glance — and lets you toggle camera, microphone, or location individually with a single tap, without navigating into settings. The widget is hidden by default and must be manually activated in the Quick Settings editor and moved to the top. I set it up and place it front and centre — instantly accessible from the first boot.

What is Auditor verification?

The Auditor app uses the Pixel's Titan M2 security chip to cryptographically prove: (1) The device is running genuine, unmodified GrapheneOS. (2) The bootloader is actually locked. (3) The system has not been tampered with since the last check. This is not a screenshot or soft claim — it is a hardware-backed attestation. I run the verification before shipping and include the result. You can repeat it yourself at any time or build a trust anchor.

What does "OEM unlock disabled" mean?

Installing GrapheneOS requires briefly unlocking the bootloader — that's technically unavoidable. After installation it is immediately re-locked, and additionally the "OEM unlocking" toggle in Developer Options is disabled. This prevents anyone with physical access to your device from unlocking the bootloader again and flashing a compromised system. On every boot, the Titan chip verifies that GrapheneOS is unmodified (Verified Boot). If something doesn't match: the device won't start — no exceptions.

Where do the installed apps come from?

Following a clear hierarchy depending on the app: Accrescent (GrapheneOS-native, signature-verified app store) takes priority — if an app is available there, it comes from there. Otherwise the app is fetched directly from the developer's official source via Obtainium — no middleman, no store-signature surprises. F-Droid is the third option when neither Accrescent nor Obtainium makes sense. For active Nostr users the Zap Store is also available on request. Which route is right for which app is explained in detail in the ebook (chapter on app stores).

Should I run Auditor again when the device arrives?

Optional — but recommended for high threat models. For most users this isn't necessary: I include the verification result and the device ships sealed. If you want maximum control or have an elevated security requirement, you can run Auditor on first boot and compare the fingerprint with the included proof — it cryptographically confirms the device arrived unmodified. A nice feature, not a requirement.

Supported Devices

GrapheneOS runs exclusively on Google Pixel. From Pixel 8 onwards: 7 years of security updates + Hardware Memory Tagging (MTE).

Model	Support until (approx.)	Recommendation
Pixel 10, 10 Pro, 10a	2032 – 2033	Latest Generation
Pixel 9, 9 Pro, 9a	2031 – 2032	Highly Recommended
Pixel 8, 8 Pro, 8a	2030 – 2031	Recommended
Pixel 7, 7 Pro, 7a	2027 – 2028	Short remaining lifespan

How It Works

1. 1
   Email with your tier and model Subject: GrapheneOS-Service — desired tier + model or budget. I reply with the total price.
2. 2
   Offer — you pay only after confirming Device price + tier fee, transparent total. No commitment before your confirmation.
3. 3
   Payment via Bitcoin or fiat Lightning, onchain or Ko-fi. Memo format: GrapheneOS [Tier] [Model] — e.g. GrapheneOS Alien Phone Pixel 9a. QR codes and details on the payment page.
4. 4
   Pixel bought with cash No online account, no data profile — cash purchase at an electronics retailer. Legal in Germany up to €9,999, no ID required.
5. 5
   Flash + configuration (depending on tier) Install GrapheneOS, lock bootloader, Auditor verification. From Bunker and up: auto-reboot, privacy widget, apps (Tor Browser, Easy Notes, Organic Maps, Aegis, App Verifier). Pro tier: also Termux with all scripts. Approx. 2–5 hours.
6. 6
   Shipping + ebook link (from Alien Phone) DHL, shipping included — delivery approx. 2 weeks. Packstation explicitly possible. From Alien Phone: personal download link for the ebook bundle via email. If anything comes up (e.g. device out of stock) I'll reach out beforehand. Currently shipping within Germany only. For international inquiries, feel free to email — I'll see what I can do.

Anonymity & Data Minimisation

• Device bought with cash — no Amazon, no account. Google doesn't know who owns this device. Legal in Germany up to €9,999, no ID required
• Bitcoin Lightning or Onchain — no bank, no PayPal, no identity requirement.
• Encrypted email — ProtonMail. PGP on request. Nostr DM also possible — ask for my npub
• DHL Packstation possible — no home address required.

Payment

• Bitcoin Lightning alien_investor@strike.me Fast, low fees
• ₿
  Bitcoin Onchain bc1qlx7txusep6txqupqtu99kzvw0zvxyle25zdzc4 For larger amounts — check network fees
• Fiat via Ko-fi PayPal or card via ko-fi.com/alieninvestor

QR codes + copy function: Payment page →

Legal & Disclaimer

Get in Touch